ba2fc97865
bug 11351: Add monitor process for keepalived
...
Then when the process dead, we can know it and prevent two MASTER case happened.
2011-09-14 16:25:17 -07:00
014e19546c
bug 11351: move redundant router scripts to ramdisk
...
Then it can exempt from storage failure.
2011-09-14 16:25:10 -07:00
d3b0f04877
bug 11351: Add checkrouter.sh.templ
...
Also modify ipassoc.sh to use checkrouter.sh
2011-09-14 16:25:03 -07:00
b007e24e59
bug 11351: Add parameters for binary file/log file
2011-09-14 16:24:50 -07:00
4bbfa2513e
bug 11307: Add PRIORITY bump up script for redundant virtual routers
2011-09-14 16:18:55 -07:00
0553c543a1
bug 11421: Add missing source cmd for ipassoc.sh
...
status 11421: resolved fixed
2011-09-13 11:08:32 -07:00
97d788dfc9
Add log for reconfigLB.sh
2011-09-12 17:00:53 -07:00
abc44ac283
bug 11266: Add lock file for every script in the systemVM
...
To prevent them from racy.
status 11266: resolved fixed
2011-09-09 18:27:33 -07:00
5a19056aa2
bug 10824: clearing up older entries in resolv.conf and dnsmasq-resolv.conf before adding so that duplicate entries do not end up in these files.
...
status 10842: resolved fixed
2011-09-07 05:11:33 +05:30
cbed4c7a44
bug 11253:
...
Added New value "link-local" to global config network.loadbalancer.haproxy.stats.visibility . With this change it can take new parameter "link-local" value apart from the existing 3 values global,guest-network,disabled.
global - stats visible from public network
guest-network - stats visible only to guestnetwork.
link-local - stats visible only to link local network
disabled - stats disabled.
2011-08-26 15:21:29 +05:30
c7a887a51c
bug 11266: Add lockfile for scripts in system vm
...
Otherwise it's easy to trigger the racy issue.
This one just contained fix for reconfigLB.sh
2011-08-25 19:37:14 -07:00
470ffcb652
bug 11191:
...
Added global config to enable/disable rp_filter for domR.
previous commit: d966906374d4a0cb8fa57326a1f7625c871f64fd
Test Case-1 :
1) Set network.disable.rpfilter global config to true
2) Restart the domR
3) check the settings reflected in proc filesystem
- for public interface like eth2,eth3 : /proc/sys/net/ipv4/conf/eth2/rp_filter should have 0 , and rest other interfaces should have value of 1
Test Case-2 :
1) set network.disable.rpfilter global config to false
2) Restart the domR
3) check the settings reflected in proc filesystem
- for public interface like eth2,eth3 : /proc/sys/net/ipv4/conf/eth2/rp_filter should have 1 , and rest other interfaces should also have value of 1
2011-08-24 13:32:07 +05:30
145a4aad37
bug 11191: Added global config to disable/enable rp_filter for domR(public interfaces)
2011-08-24 13:30:23 +05:30
8a7feb8ec1
Merge branch '2.2.y'
...
Conflicts:
agent/src/com/cloud/agent/resource/computing/LibvirtComputingResource.java
api/src/com/cloud/agent/api/routing/LoadBalancerConfigCommand.java
api/src/com/cloud/agent/api/to/FirewallRuleTO.java
api/src/com/cloud/agent/api/to/IpAddressTO.java
api/src/com/cloud/agent/api/to/PortForwardingRuleTO.java
api/src/com/cloud/api/ApiConstants.java
api/src/com/cloud/api/BaseCmd.java
api/src/com/cloud/api/ResponseGenerator.java
api/src/com/cloud/api/commands/CreateFirewallRuleCmd.java
api/src/com/cloud/api/commands/CreateIpForwardingRuleCmd.java
api/src/com/cloud/api/commands/CreateLoadBalancerRuleCmd.java
api/src/com/cloud/api/commands/CreatePortForwardingRuleCmd.java
api/src/com/cloud/api/commands/DeleteLoadBalancerRuleCmd.java
api/src/com/cloud/api/commands/ListCapabilitiesCmd.java
api/src/com/cloud/api/commands/UpdateNetworkCmd.java
api/src/com/cloud/api/response/CapabilitiesResponse.java
api/src/com/cloud/network/Network.java
api/src/com/cloud/network/NetworkService.java
api/src/com/cloud/network/firewall/FirewallService.java
api/src/com/cloud/network/lb/LoadBalancingRule.java
api/src/com/cloud/network/lb/LoadBalancingRulesService.java
api/src/com/cloud/network/rules/FirewallRule.java
api/src/com/cloud/network/rules/RulesService.java
api/src/com/cloud/offering/NetworkOffering.java
client/tomcatconf/commands.properties.in
cloud.spec
core/src/com/cloud/agent/resource/virtualnetwork/VirtualRoutingResource.java
core/src/com/cloud/hypervisor/xen/resource/CitrixHelper.java
core/src/com/cloud/hypervisor/xen/resource/CitrixResourceBase.java
core/src/com/cloud/storage/template/DownloadManagerImpl.java
core/src/com/cloud/vm/DomainRouterVO.java
debian/cloud-deps.install
patches/systemvm/debian/config/etc/init.d/cloud-early-config
patches/systemvm/debian/config/root/ipassoc.sh
patches/systemvm/debian/config/root/loadbalancer.sh
scripts/vm/hypervisor/kvm/rundomrpre.sh
scripts/vm/hypervisor/xenserver/vmops
server/src/com/cloud/agent/manager/AgentAttache.java
server/src/com/cloud/agent/manager/AgentManagerImpl.java
server/src/com/cloud/agent/manager/AgentMonitor.java
server/src/com/cloud/agent/manager/ClusteredAgentManagerImpl.java
server/src/com/cloud/alert/ClusterAlertAdapter.java
server/src/com/cloud/api/ApiResponseHelper.java
server/src/com/cloud/api/ApiServer.java
server/src/com/cloud/cluster/ClusterManagerImpl.java
server/src/com/cloud/configuration/Config.java
server/src/com/cloud/configuration/ConfigurationManager.java
server/src/com/cloud/configuration/ConfigurationManagerImpl.java
server/src/com/cloud/configuration/DefaultComponentLibrary.java
server/src/com/cloud/deploy/FirstFitPlanner.java
server/src/com/cloud/ha/HighAvailabilityManagerImpl.java
server/src/com/cloud/host/dao/HostDaoImpl.java
server/src/com/cloud/hypervisor/xen/discoverer/XcpServerDiscoverer.java
server/src/com/cloud/network/LoadBalancerVO.java
server/src/com/cloud/network/NetworkManager.java
server/src/com/cloud/network/NetworkManagerImpl.java
server/src/com/cloud/network/dao/FirewallRulesDao.java
server/src/com/cloud/network/dao/FirewallRulesDaoImpl.java
server/src/com/cloud/network/element/DhcpElement.java
server/src/com/cloud/network/element/VirtualRouterElement.java
server/src/com/cloud/network/firewall/FirewallManagerImpl.java
server/src/com/cloud/network/lb/LoadBalancingRulesManagerImpl.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
server/src/com/cloud/network/rules/FirewallManager.java
server/src/com/cloud/network/rules/FirewallRuleVO.java
server/src/com/cloud/network/rules/PortForwardingRuleVO.java
server/src/com/cloud/network/rules/RulesManagerImpl.java
server/src/com/cloud/network/rules/StaticNatRuleImpl.java
server/src/com/cloud/network/security/SecurityGroupListener.java
server/src/com/cloud/network/security/SecurityGroupManagerImpl.java
server/src/com/cloud/offerings/NetworkOfferingVO.java
server/src/com/cloud/server/ConfigurationServerImpl.java
server/src/com/cloud/server/ManagementServerImpl.java
server/src/com/cloud/storage/StorageManager.java
server/src/com/cloud/storage/StorageManagerImpl.java
server/src/com/cloud/storage/dao/VMTemplateHostDaoImpl.java
server/src/com/cloud/storage/download/DownloadMonitorImpl.java
server/src/com/cloud/upgrade/DatabaseUpgradeChecker.java
server/src/com/cloud/upgrade/dao/Upgrade228to229.java
server/src/com/cloud/upgrade/dao/Upgrade229to2210.java
server/src/com/cloud/user/AccountManagerImpl.java
server/src/com/cloud/vm/UserVmManagerImpl.java
server/src/com/cloud/vm/VirtualMachineManagerImpl.java
server/src/com/cloud/vm/dao/DomainRouterDao.java
server/src/com/cloud/vm/dao/DomainRouterDaoImpl.java
setup/db/create-index-fk.sql
setup/db/create-schema.sql
setup/db/db/schema-222to224.sql
setup/db/db/schema-227to228.sql
setup/db/db/schema-228to229.sql
setup/db/db/schema-229to2210.sql
tools/testClient/README
ui/scripts/cloud.core.instance.js
utils/src/com/cloud/utils/SerialVersionUID.java
utils/src/com/cloud/utils/db/ConnectionConcierge.java
utils/src/com/cloud/utils/db/Merovingian2.java
utils/src/com/cloud/utils/db/Transaction.java
utils/src/com/cloud/utils/nio/Link.java
utils/src/com/cloud/utils/nio/NioConnection.java
utils/src/com/cloud/utils/time/InaccurateClock.java
2011-08-22 20:28:30 -07:00
7ccc833114
Fix potential redundant router FAULT state by dnsmasq
...
This message may show during redundant router start up:
FAULT (Restarting DNS forwarder and DHCP server: dnsmasq failed!)
This caused by edithost.sh is racy with keepalived process. They both want to
restart dnsmasq.
Even in normal condition, it's very hard to reproduce this bug. Add file lock
for edithost.sh should solve it.
2011-08-19 16:11:48 -07:00
d9b0188d7e
Fix potential redundant router FAULT state by dnsmasq
...
This message may show during redundant router start up:
FAULT (Restarting DNS forwarder and DHCP server: dnsmasq failed!)
This caused by edithost.sh is racy with keepalived process. They both want to
restart dnsmasq.
Even in normal condition, it's very hard to reproduce this bug. Add file lock
for edithost.sh should solve it.
2011-08-19 16:11:33 -07:00
b9183c0840
bug 10561: merging code from 2.2.10 to master
2011-08-16 14:20:51 +05:30
779989ce6b
bug 11103: create firewall chains on ipassoc
...
status 11103: resolved fixed
bug 11106: this is somehow fixed / cannot reproduced
status 11106: resolved fixed
2011-08-15 10:18:44 -07:00
51f4485143
bug 11084: ensure AH and ESP protocols are allowed in when creating a VPN
2011-08-15 10:18:09 -07:00
407b45ee2e
Fix ping in cloud-early-config
...
The old ping don't have -w option
2011-08-12 13:47:13 -07:00
11dfba635c
Fix ping in cloud-early-config
...
The old ping don't have -w option
2011-08-12 13:47:01 -07:00
2aa349f769
bug 11083: Fix broadcast address is 0.0.0.0
...
The reason is:
1. In redundant router, we won't enable eth2(public network interface) until
keepalived determine the router is MASTER.
2. ipassoc.sh normally kick in before keepalived process running. And it would
set eth2's IP address using "ip addr add $dev $ip"
3. "ip addr add $dev $ip" won't add mask for the device, then there is no way to
update broadcast address for eth2. Then broadcast address is 0.0.0.0.
4. As long as "ip addr add $dev $ip" executed, later executed "ifconfig $dev $ip
netmask $mask" won't calculated the broadcast address from $ip and $mask.
To fix this, we enable and configure eth2 temporaily when cloud-early-config
executed, then disable eth2 interface. By this way, broadcast address of should
be calculated and set correctly.
status 11083: resolved fixed
2011-08-12 00:11:52 -07:00
ccdd7ce17f
bug 11083: Fix broadcast address is 0.0.0.0
...
The reason is:
1. In redundant router, we won't enable eth2(public network interface) until
keepalived determine the router is MASTER.
2. ipassoc.sh normally kick in before keepalived process running. And it would
set eth2's IP address using "ip addr add $dev $ip"
3. "ip addr add $dev $ip" won't add mask for the device, then there is no way to
update broadcast address for eth2. Then broadcast address is 0.0.0.0.
4. As long as "ip addr add $dev $ip" executed, later executed "ifconfig $dev $ip
netmask $mask" won't calculated the broadcast address from $ip and $mask.
To fix this, we enable and configure eth2 temporaily when cloud-early-config
executed, then disable eth2 interface. By this way, broadcast address of should
be calculated and set correctly.
status 11083: resolved fixed
2011-08-12 00:11:39 -07:00
29cc88571f
Redundant router script fix, also fix CheckRouterTask
2011-08-11 17:57:12 -07:00
23e6b96c98
Redundant router script fix, also fix CheckRouterTask
2011-08-11 17:57:00 -07:00
258a1bc451
Ifdown may not bring interface down if ifup not run
...
Use ifconfig to bring it down
2011-08-11 15:01:02 -07:00
a935e52b62
Ifdown may not bring interface down if ifup not run
...
Use ifconfig to bring it down
2011-08-11 15:00:43 -07:00
f91d173511
bug 10561: handle icmp (finally\!)
2011-08-11 14:36:41 -07:00
7807e29c30
Use ifup/ifdown for redundant router
2011-08-11 14:30:21 -07:00
95cc2d6381
Use ifup/ifdown for redundant router
2011-08-11 14:29:49 -07:00
88a1c69413
bug 10561: get static nat working
2011-08-11 12:41:21 -07:00
d1ec7e759b
remove cruft
2011-08-11 11:26:45 -07:00
4e4a44f2c4
Fix sometime system VM is up but mgmt server can't reach it
2011-08-11 11:01:14 -07:00
8b405e477c
Fix sometime system VM is up but mgmt server can't reach it
2011-08-11 10:57:05 -07:00
7c2395e684
bug 10561: fix: last entry in the firewall rules unable to delete
2011-08-11 19:01:36 +05:30
699b197a3c
bug 10561: changes to the create/delete firewall rule backend script:
...
1) changes to the return value
2) added a FIXME to one the leak.
2011-08-11 16:53:18 +05:30
35e67bbfdf
bug 10561: ensure outgoing connections work
2011-08-10 23:16:04 -07:00
16803387c6
bug 10812: changes to dhcp option 15 and 119
2011-08-11 10:23:20 +05:30
d29b01ca7f
bug 10561: backend rules for firewall
2011-08-10 18:39:52 -07:00
9f6dc993ab
Fix dhcp_entry.sh fail on redundant router
...
And don't worry about "chkconfig dnsmasq off", because keepalived script should
take care of it.
2011-08-10 17:13:45 -07:00
02049d4cd4
Fix dhcp_entry.sh fail on redundant router
...
And don't worry about "chkconfig dnsmasq off", because keepalived script should
take care of it.
2011-08-10 17:13:15 -07:00
34682b3bb0
Fix ping commandline parameter
2011-08-10 12:07:43 -07:00
ab4c4de989
Fix redundant router start up
...
commit e4fe14a9ce19fbbdb15bbfaad586d80031ca9fbc break redundant router, because
at time of ping, the network is not up for redundant router.
Add timout for ping
2011-08-10 12:07:37 -07:00
5cf6feb2e5
Fix "RTNETLINK answers: No such process" when starting redundant router
...
The issue happened quite rare, but indeed can show.
And when the issue happen, the status of redundant router would be "Status:
FAULT".
It's due to ipassoc.sh wasn't executed before the system bring eth2 up and go to
master mode, then eth2 wasn't configured correctly. Then "ip route add default
xx" can't complete.
This commit should fixes the issue.
2011-08-10 12:06:53 -07:00
a9eb14c42e
bug 10561: backend added for CreateFirewallRule and deleteFirewallRule
2011-08-10 17:06:42 +05:30
f409a9535f
bug 10812: adding the domain serach order to option 15, now the dhcp client is able to set this for search entry
2011-08-10 15:52:47 +05:30
738a9b3ad0
Fix "RTNETLINK answers: No such process" when starting redundant router
...
The issue happened quite rare, but indeed can show.
And when the issue happen, the status of redundant router would be "Status:
FAULT".
It's due to ipassoc.sh wasn't executed before the system bring eth2 up and go to
master mode, then eth2 wasn't configured correctly. Then "ip route add default
xx" can't complete.
This commit should fixes the issue.
2011-08-09 22:25:06 -07:00
9a0a3f195c
Fix ping commandline parameter
2011-08-09 21:41:56 -07:00
ba2ec7e770
Fix redundant router start up
...
commit e4fe14a9ce19fbbdb15bbfaad586d80031ca9fbc break redundant router, because
at time of ping, the network is not up for redundant router.
Add timout for ping
2011-08-09 21:02:01 -07:00
56d5054e39
Revert "bug 10561: Allowing ICMP traffic through static NAT"
...
This reverts commit 5e74e24bb359456967866cb2c6cc0f6f73570f97.
Conflicts:
server/src/com/cloud/network/rules/RulesManagerImpl.java
2011-08-09 15:51:57 -07:00
adfb6a1f03
bug 11017: kick VMware vSwitch by pinging the default gateway to work around mysterous VMware network problem
2011-08-09 15:47:22 -07:00
69ca341f1b
bug 11017: kick VMware vSwitch by pinging the default gateway to work around mysterous VMware network problem
2011-08-09 15:45:11 -07:00
071a67dcb8
Change router to FAULT state if anything goes wrong on fail-over
2011-08-09 11:09:44 -07:00
980c4b9120
Change router to FAULT state if anything goes wrong on fail-over
2011-08-09 11:09:20 -07:00
536db8a1de
loadbalancer.sh changes : 1) Removed source cidrs from iptable script,2) added sudo before iptables
2011-08-09 18:34:16 +05:30
ad29587e43
bug 10800,10557 :
...
Cahnges:
1) putting back the changes(bug 10800 and 10557) that had been reverted during merging of Elb/nectarine.
2) 10800 Upgrade from previous release also added: Upgrade from Previous release will leave iptable rules in the INPUT ipchain, this is fixed.
2011-08-09 16:53:19 +05:30
179368ea32
get lb working on advanced mode again
2011-08-09 01:02:58 -07:00
e62f828e52
bug 11003: Fix HAproxy with new template
...
New debian package didn't create directory /var/lib/haproxy, which result in
haproxy fail to work.
status 11003: resolved fixed
2011-08-08 17:59:25 -07:00
12cadca538
Revert "bug 10561: Allowing ICMP traffic through static NAT"
...
This reverts commit 5e74e24bb359456967866cb2c6cc0f6f73570f97.
2011-08-08 17:59:05 -07:00
8277584b8a
merge ELB / nectarine branch
2011-08-08 15:20:56 -07:00
55eb0e4b65
bug 11003: Fix HAproxy with new template
...
New debian package didn't create directory /var/lib/haproxy, which result in
haproxy fail to work.
status 11003: resolved fixed
2011-08-08 13:36:53 -07:00
9985df928b
Try to workaround "ip route add" fail in redundant router
...
It's probably due to the network is not ready, so wait some time for it.
2011-08-05 16:40:57 -07:00
49709d716a
Try to workaround "ip route add" fail in redundant router
...
It's probably due to the network is not ready, so wait some time for it.
2011-08-05 16:40:35 -07:00
5552b650ff
Merge branch 'guru' into 2.2.8.nectarine
2011-08-05 12:27:47 -07:00
ac8b833fb0
Ensure lb vm enables only those services that are necessary. ensure default route
2011-08-05 12:16:55 -07:00
dae2f4d958
bug 10748: fixed it when the VM acts as a dhcp server only
...
status 10748: resolved fixed
2011-08-05 12:07:59 +05:30
0f2a9b6a69
bug 10748: fixed it when the VM acts as a dhcp server only
...
status 10748: resolved fixed
2011-08-05 12:02:54 +05:30
c460a1b80b
bug 10748: fixed it when the VM acts as a dhcp server only
...
status 10748: resolved fixed
2011-08-05 11:58:48 +05:30
0c408d8da5
handle elb vm restart
2011-08-04 22:05:48 -07:00
61fd6a79c8
ensure elb vm is managed by elb manager
2011-08-04 17:02:27 -07:00
e936a52f10
merge changes from parent branch
2011-08-04 12:39:25 -07:00
46427fef91
bug 10561: Allowing ICMP traffic through static NAT
2011-08-03 21:15:02 +05:30
954d8673c7
bug 10561: Allowing ICMP traffic through static NAT
2011-08-03 18:13:09 +05:30
f6303c13fb
bug 10812: putting key in ZoneConfig and other nomenclature changes
2011-08-03 14:42:29 +05:30
cd78c5cb9b
bug 10812: putting key in ZoneConfig and other nomenclature changes
2011-08-03 14:32:28 +05:30
6dd519ddd4
bug 10812: putting key in ZoneConfig and other nomenclature changes
2011-08-03 14:16:08 +05:30
7e727be42c
bug 10748: use external dnses if set thru global config (dhcp otpion 6)
2011-08-03 12:34:02 +05:30
8d47c53735
Revert "bug 10435: removed vpn feature"
...
This reverts commit ea9e1b5d138950e8de49fce7ffdbb12a1c72c560.
Conflicts:
api/src/com/cloud/api/ResponseGenerator.java
scripts/vm/hypervisor/xenserver/vmops
server/src/com/cloud/configuration/Config.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManager.java
server/src/com/cloud/network/router/VirtualNetworkApplianceManagerImpl.java
2011-08-02 18:12:57 -07:00
2f804dd799
bug 10748: use external dns, configurable thru global param
2011-08-02 16:21:55 +05:30
9009026eba
bug 10748: use external dns
...
status 10748: resolved fixed
2011-08-02 15:35:13 +05:30
4f3dec5f1c
bug 10812: adding domain suffixes to zone's router conf
2011-08-02 11:34:38 +05:30
5cb3882349
bug 10812: adding domain suffixes to zone's router conf
2011-08-02 11:23:33 +05:30
46be774ce8
bug 10812: adding domain suffixes to zone's router conf
2011-08-02 11:08:24 +05:30
56d7be35f1
WIP
2011-07-29 11:04:54 -07:00
15d57cef9f
bug 10557: implemented the TODO - opening the stats port using iptable
2011-07-28 17:28:20 +05:30
d79633b545
bug 10800: iptable rable restore upon failure is changed
2011-07-28 17:27:44 +05:30
2fc7be14de
bug 10557: implemented the TODO - opening the stats port using iptable
2011-07-28 17:24:10 +05:30
e19c51e68c
bug 10800: iptable rable restore upon failure is changed
2011-07-28 13:43:07 +05:30
f27116c50e
log haproxy changes to system log and auth
2011-07-27 12:00:08 -07:00
07c2f6cdc7
differentiate between dhcp server and elb vm
2011-07-27 12:00:07 -07:00
296d0af503
bug 10800: Load balancer - deleted settings from UI not removed from the Iptables
2011-07-27 14:57:49 +05:30
9761661989
bug 10855: fix a typo when merging git conflicts
2011-07-26 10:50:33 -07:00
db29f7792c
bug 10855: the issue is caused by expanding content that has space inside at sub-shell, use back quote substitution to enforce the correct shell macro expansion
2011-07-26 10:50:10 -07:00
3e8fb4add2
bug 10855: fix a typo when merging git conflicts
2011-07-26 10:48:54 -07:00
db09c6ae47
bug 10855: the issue is caused by expanding content that has space inside at sub-shell, use back quote substitution to enforce the correct shell macro expansion
2011-07-26 10:41:26 -07:00
67dc2ec915
bug 10800: Load balancer - deleted settings from UI not removed from the Iptables
2011-07-26 15:28:01 +05:30
30942b77a3
fix meta data returning 404 issue on vmware
2011-07-25 21:20:09 -07:00
3a17b37808
fix meta data returning 404 issue on vmware
2011-07-25 21:17:42 -07:00
dff712f2a9
bug 10731: sending source cidrs to the required router element, on domR allowing these source cidrs thru iptables
...
status 10731: resolved fixed
2011-07-21 13:48:42 +05:30
de34d6089d
bug 10731: sending source cidrs to the required router element, on domR allowing these source cidrs thru iptables
...
status 10731: resolved fixed
2011-07-21 13:40:06 +05:30
Sheng Yang
Abhinandan Prateek
Naredula Janardhana Reddy
alena
Chiradeep Vittal
Kelven Yang
Edison Su